Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/37d695c93eb0fe971c0d36b631086eb9c8cad102.roa
File:                     37d695c93eb0fe971c0d36b631086eb9c8cad102.roa (raw, json)
Hash identifier:          FHrs5/qx2Q77M2C/gYbCtzdJ3Il8s1+O/XqupTpJNdw=
Subject key identifier:   59:A4:14:15:94:C0:1C:4A:4D:29:39:C3:02:BC:2A:C3:1D:A6:37:5A
Certificate issuer:       /CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
Certificate serial:       1FD9BF
Authority key identifier: E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/37d695c93eb0fe971c0d36b631086eb9c8cad102.roa
Signing time:             Mon 05 Jun 2023 21:09:28 +0000
ROA not before:           Sun 04 Jun 2023 21:09:25 +0000
ROA not after:            Thu 05 Jun 2025 21:09:25 +0000
asID:                     27951
IP address blocks:        45.176.232.0/22 maxlen: 24
                          2803:9260::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2087359 (0x1fd9bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
        Validity
            Not Before: Jun  4 21:09:25 2023 GMT
            Not After : Jun  5 21:09:25 2025 GMT
        Subject: CN=37d695c93eb0fe971c0d36b631086eb9c8cad102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:b8:6f:8a:fc:36:19:96:9a:da:5a:05:d9:
                    32:64:3e:22:48:dd:ce:f7:87:cd:ac:35:f6:89:0a:
                    16:61:b1:0f:9f:19:0d:36:22:95:b1:1e:34:84:09:
                    d8:6b:c8:97:4c:7d:11:58:15:49:96:f0:b7:74:90:
                    70:47:a4:21:f8:74:70:cc:01:28:49:0c:af:3f:6e:
                    e0:66:c6:85:ae:88:af:83:c7:cb:67:73:93:bc:00:
                    18:1e:da:e4:5e:75:32:04:8c:61:1b:70:06:e5:ef:
                    a4:d6:ac:4d:71:e5:eb:2f:b9:7b:41:2e:e5:ac:be:
                    0d:f2:e3:5f:84:c8:c5:fd:36:c0:da:db:58:cf:b3:
                    0d:e3:4a:a7:17:90:54:bd:10:81:4d:2c:4c:ce:fb:
                    b2:0b:d8:fa:5e:7f:b3:54:58:a1:c2:fb:83:e2:73:
                    9d:33:10:c6:12:5d:da:ad:33:5e:5e:36:ff:79:52:
                    07:86:c5:10:f7:b0:fc:70:81:fd:87:c8:6e:4c:06:
                    56:cb:09:23:4f:3d:09:99:13:54:4b:c1:e4:32:47:
                    33:de:ea:be:57:63:b7:cf:10:b4:4a:45:1a:b2:e3:
                    3e:0a:93:a2:34:34:07:3e:41:eb:6d:bf:e3:48:09:
                    a3:41:48:8e:2d:65:46:ba:e6:a7:5a:ce:f2:c7:e4:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A4:14:15:94:C0:1C:4A:4D:29:39:C3:02:BC:2A:C3:1D:A6:37:5A
            X509v3 Authority Key Identifier:
                keyid:E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/37d695c93eb0fe971c0d36b631086eb9c8cad102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.232.0/22
                IPv6:
                  2803:9260::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:8c:88:06:dd:bd:7d:d9:4f:43:05:d4:84:26:f6:6d:0a:66:
         77:b5:2c:72:b2:1b:6b:ac:db:2f:18:63:54:91:47:2f:38:d8:
         19:c7:52:3d:da:8f:3d:94:9c:64:05:e2:8b:25:08:6e:15:c7:
         be:8d:ca:01:db:2b:55:84:8b:cf:04:7e:33:4e:bf:0d:d5:17:
         65:de:12:80:d0:83:c1:ad:3b:be:37:28:4c:50:35:f9:44:7a:
         b4:0f:97:ee:73:de:4a:06:bc:61:95:eb:cb:1f:c4:97:62:fb:
         6e:f5:b0:73:6f:6a:e0:93:80:1b:10:8c:72:9d:d5:61:df:e0:
         a1:91:ec:76:18:67:c4:b5:c6:ab:4e:39:16:08:7a:f9:8d:c4:
         23:9c:45:63:a4:a7:8c:74:7a:18:5b:0b:3d:fb:b8:d7:32:ea:
         ab:20:b1:0a:1e:d8:2c:9e:ea:f3:50:11:c6:5c:fe:7a:1b:3f:
         db:c9:ba:15:5d:55:8b:45:48:02:d0:ae:7b:5a:03:aa:a8:4f:
         56:78:31:5a:aa:5a:bc:17:dd:d1:65:98:4e:6e:2d:28:0a:34:
         29:e7:9b:02:fe:59:fc:cd:76:12:94:ca:50:6d:77:62:9d:90:
         78:92:26:c4:1a:c5:3c:c3:96:a0:09:a0:7a:4f:ac:ad:90:3e:
         eb:1f:ce:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----